Exploits

ALFTP 5.31 – Local Buffer Overflow (SEH Bypass)

# Exploit Title: ALFTP 5.31 - Local Buffer Overflow (SEH Bypass)

Joomla! Component jCart for OpenCart 2.3.0.2 – Cross-Site Request Forgery

# Exploit Title: Joomla! extension jCart for OpenCart 2.3.0.2 - Cross site request forgery

Joomla! Component JoomOCShop 1.0 – Cross-Site Request Forgery

# Exploit Title: Joomla! extension JoomOCShop 1.0 - Cross site request forgery

wityCMS 0.6.1 – Cross-Site Scripting

# Exploit Title: wityCMS 0.6.1 Persistent XSS on "Website's name" field

Sony Playstation 4 (PS4) 5.07 – ‘Jailbreak’ WebKit / ‘bpf v2’ Kernel Loader

# PS4 5.05 Kernel Exploit

Sony Playstation 4 (PS4) 5.1 – Kernel (PoC)

log("--- trying kernel exploit --");

WordPress Plugin Booking Calendar 3.0.0 – SQL Injection / Cross-Site Scripting

# Exploit Title: Wordpress Plugin Booking Calendar 3.0.0 - SQL Injection / Cross-Site Scripting

Ingenious School Management System – ‘id’ SQL Injection

# Exploit Title: Ingenious School Management System - SQL Injection

Sharetronix CMS 3.6.2 – Cross-Site Request Forgery / Cross-Site Scripting

# Exploit Title: Sharetronix CMS XSRF Vulnerability

Lyrist – ‘id’ SQL Injection

# Exploit Title: Lyrist - Music Lyrics Script - SQL Injection

BookingWizz Booking System 5.5 – ‘id’ SQL Injection

# Exploit Title: BookingWizz Booking System 5.5 - 'bs-services-add.php' SQL Injection

Listing Hub CMS 1.0 – SQL Injection

# Exploit Title: Listing Hub CMS 1.0 - Multiple SQL Injection

ClipperCMS 1.3.3 – Cross-Site Scripting

# Exploit Title: ClipperCMS 1.3.3 Persistent XSS on 'Site name' field

Werewolf Online 0.8.8 – Information Disclosure

# Exploit Title: Werewolf Online 0.8.8 - Insecure Logging

My Directory 2.0 – SQL Injection / Cross-Site Scripting

# Exploit Title: My Directory 2.0 - SQL Injection / Cross-Site Scripting

Baby Names Search Engine 1.0 – ‘a’ SQL Injection

# Exploit Title: Baby Names Search Engine v1.0 - 'a' SQL Injection

Bitmain Antminer D3/L3+/S9 – Remote Command Execution

# Exploit Title: Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution

Employee Work Schedule 5.9 – ‘cal_id’ SQL Injection

# Exploit Title: EWS 5.9 - 'search' SQL Injection

Ajax Full Featured Calendar 2.0 – ‘search’ SQL Injection

# Exploit Title: Ajax Full Featured Calendar 2.0 - 'search' SQL Injection

EasyService Billing 1.0 – Cross-Site Request Forgery

EasyService Billing 1.0 – Cross-Site Scripting

EasyService Billing 1.0 – ‘q’ SQL Injection

mySurvey 1.0 – ‘id’ SQL Injection

# Exploit Title: mySurvey 1.0 - 'statistic.php' SQL Injection

easyLetters 1.0 – ‘id’ SQL Injection

# Exploit Title: easyLetters 1.0 - 'id' SQL Injection

Symfony 2.7.0 < 4.0.10 - Denial of Service

The PDOSessionHandler class allows to store sessions on a PDO connection. Under some configurations (see below) and w...

Oracle WebCenter Sites 11.1.1.8.0/12.2.1.x – Cross-Site Scripting

# Exploit Title: Multiple XSS Oracle WebCenter Sites (FatWire Content

KomSeo Cart 1.3 – ‘my_item_search’ SQL Injection

# Exploit Title: KomSeo Cart 1.3 - 'edit.php' SQL Injection

MyBB Moderator Log Notes Plugin 1.1 – Cross-Site Scripting

# Exploit Title: MyBB Moderator Log Notes Plugin 1.1 - Cross-Site Scripting

SAP Internet Transaction Server 6200.x – Session Fixation / Cross-Site Scripting

# Exploit Title: SAP Internet Transaction Server (ITS) 6200.X.X - Session Fixation/ Cross-Site Scripting

Oracle WebCenter FatWire Content Server < 7 - Improper Access Control

# Exploit Title: Oracle WebCenter FatWire Content Server < 7 - Improper Access Control

Microsoft Edge Chakra – Cross Context Use-After-Free

Skia and Firefox – Integer Overflow in SkTDArray Leading to Out-of-Bounds Write

go

D-Link DSL-2750B – OS Command Injection (Metasploit)

##

ASP.NET jVideo Kit – ‘query’ SQL Injection

# Exploit Title: ASP.NET jVideo Kit - 'query' SQL Injection

PaulNews 1.0 – ‘keyword’ SQL Injection / Cross-Site Scripting

# Exploit Title: PaulNews 1.0 - 'keyword' SQL Injection / Cross-Site Scripting

Timber 1.1 – Cross-Site Request Forgery

# Exploit Title: Timber - Ultimate Freelancer Platform 1.1 - Cross site request forgery

Honeywell XL Web Controller – Cross-Site Scripting

# Exploit Title: Honeywell XL Web Controller - Cross-Site Scripting

EU MRV Regulatory Complete Solution 1 – Authentication Bypass

# Exploit Title: EU MRV Regulatory Complete Solution 1 - Authentication Bypass

EasyService Billing 1.0 – SQL Injection / Cross-Site Scripting

# Exploit Title: EasyService Billing 1.0 - 'template_().php' SQL Injection / Cross-Site Scripting

EasyService Billing 1.0 – ‘p1’ SQL Injection

# Exploit Title: EasyService Billing 1.0 - 'customer-new-s.php' SQL

MySQL Smart Reports 1.0 – ‘id’ SQL Injection / Cross-Site Scripting

# Exploit Title: MySQL Smart Reports 1.0 - SQL Injection / Cross-Site Scripting

MySQL Blob Uploader 1.7 – ‘download.php’ SQL Injection / Cross-Site Scripting

# Exploit Title: MySQL Blob Uploader 1.7 - 'download.php' SQL Injection / Cross-Site Scripting

MySQL Blob Uploader 1.7 – ‘home-file-edit.php’ SQL Injection / Cross-Site Scripting

# Exploit Title: MySQL Blob Uploader 1.7 - 'home-file-edit.php' SQL Injection / Cross-Site Scripting

MySQL Blob Uploader 1.7 – ‘home-filet-edit.php’ SQL Injection / Cross-Site Scripting

# Exploit Title: MySQL Blob Uploader 1.7 - 'home-filet-edit.php' SQL Injection / Cross-Site Scripting

MySQL Blob Uploader 1.7 – ‘home-filet-edit.php’ SQL Injection

# Exploit Title: MySQL Blob Uploader 1.7 - 'home-filet-edit.php' SQL Injection

FTPShell Server 6.80 – Buffer Overflow (SEH)

#!/usr/bin/python

PHP Dashboards 4.5 – ’email’ SQL Injection

# Exploit Title: PHP Dashboards v4.5 - Registration Page SQL Injection

PHP Dashboards 4.5 – SQL Injection

# Exploit Title: PHP Dashboards 4.5 - SQL Injection

Mobile Card Selling Platform 1 – Cross-Site Request Forgery

# Exploit Title: Mcard - Mobile Card Selling Platform 1 - Cross-Site Request Forgery

FTPShell Server 6.80 – Denial of Service

# Exploit Title: FTPShell Server 6.80 - Local Denial of Service